| Age | Commit message (Collapse) | Author | Files | Lines |
|
A few new images got apache as part of blueprint
apache-packages-for-apis without a cleaning up. Without this step the
containers may fail to restart due to runtime files already present.
This commit fixes it for all images with the exception of heat-base so
that it can be cleanly backported to stable/ocata.
It also removes the unused APACHE_DIR variable from freezer-api and
keystone extend_start.sh script.
Change-Id: I47d75221b3d1aae91f11d3e0da83e221a00315b7
Closes-Bug: #1679565
|
|
Use LABEL instruction instead of MAINTAINER (deprecated) instruc-
tion as suggested by Docker's official dockerfile guide.
docs.docker.com/engine/reference/builder/#maintainer-deprecated
Closes-Bug: #1683652
Change-Id: Ie87a1ddf31aefcd0b623fd2837d78de420e76898
|
|
Debian 'jessie' even with backports lacks some packages Kolla expects. Due
to this we (Linaro) move to Debian 'stretch' release with our OpenStack
work.
Stretch is now frozen so there should not be many changes.
Partially-Implements: blueprint multiarch-and-arm64-containers
Change-Id: Iab7232cbe6f8fc3e3de10c67f3d89f134b185f05
|
|
Ubuntu has rtslib/targetcli packages while CentOS and Debian use 'fb'
fork of those.
Partially-Implements: blueprint multiarch-and-arm64-containers
Change-Id: I8721854eefa6c55bb6e627db9a051c8f9202d1e1
|
|
|
|
Add oslo.vmware and vmware_nsx packages into kolla.
Change-Id: I2a1ed314b970a4832f7f8256c1929921f36069f2
Implements: blueprint kolla-support-vsphere
Co-Authored-By: shaofeng cheng <chengsf@winhong.com>
|
|
Debian support is not maintained in Kolla so it got a bit behind Ubuntu
one. This changeset enables Debian for all images. Jessie (even with
backports) may be too old for some images though.
Also unify distro check to ['debian', 'ubuntu'] to keep alphabetical order
like it is done for RPM distributions.
Partially-Implements: blueprint multiarch-and-arm64-containers
Change-Id: I056233fbfa277e0e2360c07c3f80d9558c554357
|
|
Some images have packages sorted alphabetically and some not.
Unify common style between all images.
Change-Id: I906ed89c10b12886665618752f525ba71d83d991
|
|
This apache module is necessary for when one wants to use TLS for the
services running over httpd.
This only addressed RHEL based systems at the moment, since there is no
such package available for Ubuntu. This requires apache2.2-common which
will carry a lot more dependencies; So I think this should be handled
and decided in a separate patch.
when installing mod_ssl in RHEL-based distributions, an ssl.conf file is
installed in the /etc/httpd/conf.d directory. This file tells httpd to
listen on port 443; however, we don't want to do this by default, since
this should be explicitly enabled by the container's configuration. This
line is thus removed from the configuration.
A release note was added, which specifies this. And the last sentence
can be removed if this is addressed for debian/ubuntu as well.
Related-Bug: #1675490
Co-Authored-By: Martin André <m.andre@redhat.com>
Change-Id: Id6215d31547247309d43c031e163fa9e4c4ec5dc
|
|
A few new images got apache as part of blueprint
apache-packages-for-apis without restricting it to listen on port 80.
This commit fixes it for all images with the exception of heat-base so
that it can be cleanly backported to stable/ocata.
Co-Authored-By: Juan Antonio Osorio Robles <jaosorior@redhat.com>
Change-Id: Idd3bbeffea9233eaed420798e22ea9a3a517c166
Closes-Bug: #1675308
|
|
|
|
When installing from binary, packaging tools create a user for
Keystone which does not have a shell. This results in fernet
token operations failing due to the fact that `rsync` cannot
connect over SSH because the Keystone user cannot login.
This patch addresses this issue by enabling shell access
to the Keystone user, it also refactors the Nova SSH controller
to use the pre-existing macro.
Change-Id: Ic753a94311c5d7d72a82d91c1279dfe982e9afbd
Related-Bug: #1617902
|
|
libosinfo is required by nova-compute.
Change-Id: I5615e191d1a9a2ea35cab41b6b03803ebfaf3cb1
Closes-Bug: #1670692
|
|
Currently Windows and non-declared os_type images (defaults
to Windows) attempt to format ephemeral volumes with
mkfs.vfat but fail as this tool is not available in the
container.
This is resolved by installing dosfstools on the Source
builds (as I believe this is handled in binary builds
through dependencies).
Change-Id: Iefa5fb0a16eed30aea935268f2a9becb1481b018
Closes-bug: #1672199
Signed-off-by: Dave Walker (Daviey) <email@daviey.com>
|
|
1. Enable customization of pip packages in source
branch of most images
2. All pip packages install uniformly through
install-pip macro, user can easily customize his
own pip command (For example using a mirror)
Co-Authored-By: Mauricio Lima <mauriciolimab@gmail.com>
Change-Id: If09582039f690fa4136e8f33200d5da15e092da7
|
|
include_header and include_footer parameter is already removed, remove
them in all Dockerfiles.
Add missing footer block.
Change-Id: I90da03eb9f95a3827361d5f5ede65fde7d6be2b3
|
|
|
|
sshd containers don't let logins on some systems with older
PAM library because /proc/self/loginuid is not always readable
or writeable. Examples of possible failures on such systems are
erroneous cold and live migrations.
This fix does not upgrade PAM but makes pam_loginuid optional
for nova_ssh and keystone_ssh.
More information:
https://github.com/docker/docker/issues/5663
https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=726661
https://git.fedorahosted.org/cgit/linux-pam.git/tree/modules/pam_loginuid/pam_loginuid.c#n61
Change-Id: Ic14255b042ceedcff536c062bdcba00502af7a87
Closes-Bug: #1651395
|
|
|
|
Change-Id: I61ce3b695e66cd76f8f9a43863c94601d312e8fe
Closes-Bug: #1661152
|
|
Change-Id: I30efc20e6d918e08860584c017455e6d5fa91a35
Closes-Bug: #1660987
|
|
This centralizes all user and group creation into a single source. This
will fix any current and furture uid/gid mismatches (such as with
nova-libvirt).
In the process, we also unify users between the distros in a standard
way. The users in the following containers change from thier defaults:
Ubuntu: _chrony user is now chrony
Ubuntu: memcache user is now memcached
All: qemu user is used for ownership and socket permissions
All uid and gid numbers are customizable via kolla-build.conf
Co-Authored-By: Kris Lindgren <klindgren@godaddy.com>
Change-Id: I120f26ab0683dc87d69727c3df8d4707e52a4543
Partially-Implements: blueprint static-uid-gid
|
|
Some projects that use Kolla docker containers (TripleO) run nova-api under
httpd. This patch adds the httpd package so that it exists in the container
and can optionally by used via Docker entrypoints.
As many of these projects do not require the use of Apache (it is opt-in) at
this point not all deployment frameworks support the use of it so
the existing configuration defaults have been left as-is for now.
Partial-Blueprint: apache-packages-for-apis
Change-Id: Id22da4626c659d8c9f457b71d9423e5fd9e8c25a
|
|
Currently Kolla only offers source installs for OpenStack projects.
The novnc and spice images have been consistent with this resulting in
tarballs being pulled from github. The binary/source distinction should
be removed for these images.
Change-Id: Ibdf593a2a164e39bba3ea2a0e6333f2de876c2a0
|
|
The nova-network service was deprecated, this patch to
remove nova-network container.
TrivialFix
Change-Id: I73b4215f7538570e1140780e9f52df9ca58e92ff
|
|
|
|
TrivialFix
Change-Id: I75b82d1d949990f77a1d70992c23544cf53cf9b3
|
|
Allow cinder-volume, nova-compute and nova-libvirtd to be configured to
use NFS. In order to mount and work with NFS shares, several containers
needed the NFS packages installed during build time.
One somewhat significant change is the addition of an explicit bind
volume for nova-compute that has shared mounts enabled.
According to docker-run(1), the shared mount propagation flag can only
be specified for bind mounted Docker volumes and not named volumes.
In an NFS setup, cinder-volume mounts the NFS shares so that it can
create and manage the Cinder volumes. When a new instance is created
with a Cinder volume or a Cinder volume is attached to an existing
instance, nova-compute mounts the Cinder volume from the NFS share for
nova-libvirtd. In order for nova-libvirtd to then see those Cinder
volumes the shared mounts flag must be enabled for the Docker volume.
Remove the rpcbind container as it is only necessary for operators who
are using NFSv3 or lower. There is no known need for this currently
however, this container can be added in the future should an operator
require it.
Co-authored-by: Ryan Hallisey <rhallise@redhat.com>
Co-authored-by: Andrew Widdersheim <amwiddersheim@gmail.com>
Change-Id: Iad77c05bce8876bdcc69b7ec22edd50e3bf48b9f
Closes-Bug: #1530515
Partially implements: blueprint nfs-support-in-cinder
|
|
|
|
Closes-bug: #1616387
Change-Id: Id97f88b9baa3d48d33ce120962450a374282d044
|
|
centos based container already have python-websockify installed.
but it gives warning to install numpy package.
ubuntu based container need to install websockify package that will
install both module websockify and its dependency numpy module. so no
need to install numpy package externally in ubnutu but in centos
it need to install.
Closes-bug: #1638801
Change-Id: Ic858543733ec86f55ab506edcd3631a6df1a086d
|
|
We need install qemu-kvm package which come from the Cloud SIG rather
then qemu-system-x86 which come from EPEL.
Change-Id: Ibd027069771552d3db0e4fe0c7406ddd1bfc0673
Closes-Bug: #1631984
|
|
|
|
|
|
Need to add nova user to qemu group.
Change-Id: I0df21d00fb295e0f2c14dd6abd4bee518fec8371
Closes-Bug: #1623682
|
|
Change-Id: I9cd7e6d26af913f06f6b9119496e2f228266b293
Partially-Implements: blueprint nova-proxies
Signed-off-by: Eduardo Gonzalez <dabarren@gmail.com>
|
|
Change needed to add header blocks to all Dockerfiles, similar to the
base.
Use case is to easily run something before packages are installed, e.g.
to COPY a local rpm in that can be added to the package list.
Change-Id: I1bbfdf0b762da0a392aa8bf47781315b45377bee
Closes-Bug: 1618969
|
|
|
|
|
|
According to the configuration reference,
http://docs.openstack.org/mitaka/config-reference/compute/resize.html
When using KVM, nova utilizes SSH for instance resizing.
Kolla nova_ssh container has the nova user configured with "/sbin/nologin" shell,
which prevents nova_compute from successfully resizing instances.
Added fix to change shell from nologin to bash.
Change-Id: I46a48e242dae6ee6c9159bc30edd8b823ffbb515
Closes-Bug: 1617902
|
|
Is a best practice in Unix/Linux scripts to use dots
instead of source command.
Using dots will avoid issues with non BASH shells
TrivialFix
Change-Id: Ie6480a1954f853f79faffa093452715ebd9f7d90
Signed-off-by: Eduardo Gonzalez <dabarren@gmail.com>
|
|
Change-Id: I7556d6cd473516c7ceb4aba7c1ba1130af2544ee
Partially-implements: blueprint third-party-plugin-support
|
|
The /var/lib/nova/instances should be create if it do not exist
during starting nova-compute container. Rather than create it
at the bootstrap service stage.
Change-Id: Ibcc5fb8eec0b38cf2b4313f48d1beb3ba83b1e85
Closes-Bug: #1614970
|
|
Upgrade Ubuntu base image to Xenial
Closes-Bug: #1593599
Change-Id: I5832a729a9a4fa73c02442047c92ba088ce20db3
|
|
Change-Id: I4b109f7fdc3b8e49defed26979b04ca158842e98
Closes-Bug: #1598423
|
|
This solves the following issue when using latest noVNC sources for
the nova-novncproxy container:
OSError: [Errno 13] Permission denied: '/usr/share/novnc'
Change-Id: Iea1f3dfcc696f53431e99570019e27cdef4ca5cb
Closes-bug: #1593006
|
|
- handle different xen-utils version in debian/ubuntu
- add rm -f to ignore nonexistent file in debian
- add variable for libvirt group since different in debian
Partially-implements: blueprint build-debian
Change-Id: I44c55981819294286d163b5391aefe967b6dd1d9
|
|
nova-spicehtml5proxy service fails on RPM-based systems unless the
spice-html5 RPM is also installed.
Change-Id: I0807159cd68bcc9df4da2d94d7b54a2871236f59
Closes-Bug: #1587212
|
|
Change-Id: If4be00b937e14ec93443dcb7249cf17099d57cbe
Closes-Bug: #1569417
|
|
Closes-Bug: #1572819
Change-Id: I1f2edb482af1e85708159a0dba44a79427dc5af3
|